Browse CVEs

HIGH 7.8 CVE-2016-1420 The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files,… Application Infrastructure Controller Mitigation only Fix from $1,9502016-06-10 HIGH 8.1 CVE-2016-1419 Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload) via crafted ARP packets, aka… Aironet Access Point Software Mitigation only Fix from $1,9502016-06-10 HIGH 7.8 CVE-2016-1418 Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root ac… Aironet Access Point Software Mitigation only Fix from $1,9502016-06-08 HIGH 7.5 CVE-2016-1405 libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-1… Email Security Appliance Mitigation only Fix from $1,9502016-06-08 HIGH 7.8 CVE-2016-1403 CISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS command execution via crafted CLI commands, aka Bug… Ip Phone 8800 Series Firmware Mitigation only Fix from $1,9502016-06-04 HIGH 8.8 CVE-2016-1391 Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) and Prime Virtual Network Analysis Module (vNAM) be… Prime Network Analysis Module Software Mitigation only Fix from $1,9502016-06-04 HIGH 7.8 CVE-2016-1390 Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) be… Prime Network Analysis Module Software Mitigation only Fix from $1,9502016-06-04 CRITICAL 9.8 CVE-2016-1388 Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) be… Network Analysis Module Mitigation only Fix from $2,3002016-06-03 MEDIUM 5.3 CVE-2016-1370 Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of serv… Network Analysis Module Software Mitigation only Fix from $1,6002016-06-03 HIGH 7.5 CVE-2016-1409 The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows… iOS Mitigation only Fix from $1,9502016-05-29 HIGH 7.5 CVE-2016-1404 Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different … Ucs Invicta C3124sa Appliance Mitigation only Fix from $1,9502016-05-29 MEDIUM 6.5 CVE-2016-1413 The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted cod… Secure Firewall Management Center Mitigation only Fix from $1,6002016-05-28 HIGH 7.5 CVE-2016-1410 Cisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive information about username validity by (1) attending or … Webex Meeting Center Mitigation only Fix from $1,9502016-05-28 MEDIUM 6.5 CVE-2016-1379 Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to caus… Adaptive Security Appliance Software Mitigation only Fix from $1,6002016-05-28 MEDIUM 6.5 CVE-2016-1385 The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (inst… Adaptive Security Appliance Software Mitigation only Fix from $1,6002016-05-26 HIGH 7.5 CVE-2016-1407 Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of se… Ios Xr Mitigation only Fix from $1,9502016-05-25 HIGH 8.8 CVE-2016-1406 The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticate… Evolved Programmable Network Manager Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2016-1400 Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disruption) via… Telepresence Video Communication Server Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2016-1383 Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consump… Web Security Appliance \(wsa\) Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2016-1382 Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, which allo… Web Security Appliance \(wsa\) Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2016-1381 Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of se… Web Security Appliance Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2016-1380 Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-process hang) … Web Security Appliance Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2016-1402 The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorizati… Identity Services Engine Software Mitigation only Fix from $1,9502016-05-21 MEDIUM 6.1 CVE-2016-1401 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing System (UCS) Central Software 1.4(1a) allows remote a… Unified Computing System Central Software Mitigation only Fix from $1,6002016-05-21 HIGH 7.5 CVE-2016-1399 The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 1… iOS Mitigation only Fix from $1,9502016-05-14 HIGH 7.1 CVE-2016-1393 SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute arbitrary S… Cloud Network Automation Provisioner Mitigation only Fix from $1,9502016-05-12 HIGH 7.4 CVE-2016-1392 Open redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0 allows remote attackers to redirect users to arbitrary … Prime Collaboration Assurance Mitigation only Fix from $1,9502016-05-05 CRITICAL 9.8 CVE-2016-1387 The XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint (CE) 8.0.0, 8.0.1, and 8… Telepresence Tc Software Mitigation only Fix from $2,3002016-05-05 HIGH 8.6 CVE-2016-1373 The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)E… Finesse Mitigation only Fix from $1,9502016-05-05 HIGH 7.5 CVE-2016-1369 The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6… Asa With Firepower Services Mitigation only Fix from $1,9502016-05-05